[nsp-sec] SSH scanning - we are now up over 1000

[CERT-UT - Peter]

Joel Rosenblatt wrote on 12-Aug-10 12:35:

> Note that even though the number of attackers from last night is back to
> my normal of around 30, the total number of attempts had not gone down
> significantly.

I can see the same here.

> There are a lot less of them, but they are trying harder :-)

I am glad with that. We are running a honey pot that puts the IP
addresses performing the scan in quarantine. But our routers can't
handle the amount of IP addresses it currently has to block.

-- 
Peter Peters
CERT-UT Officer off Duty
cert at utwente.nl               http://www.utwente.nl/itsecurity
office-hours: +31 53 489 2301

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 543 bytes
Desc: OpenPGP digital signature
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20100812/bfd08624/attachment-0001.sig>